Microsoft Patch Tuesday for April 2021 — Snort rules and prominent vulnerabilities

Summary: Microsoft's April 2021 security update disclosed 108 vulnerabilities, the most in any month so far that year, including four new critical remote code execution flaws in Exchange Server tracked as CVE-2021-28480 through CVE-2021-28483, the highest with a CVSS score of 9.8. The release contains 20 critical vulnerabilities, among them twelve in the remote procedure call runtime that require no user interaction, plus CVE-2021-28310 in Win32k, which Microsoft says has already been exploited in the wild.
What you should know: One of the 108 flaws, CVE-2021-28310, is already being exploited, and the four Exchange bugs arrive months after attackers exploited earlier Exchange zero-days in the wild - so the patch list is not a forecast but a record of active targeting.

Read the original at Cisco Talos ↗

Topics: Vulnerabilities & Patching
Mentions: CVE-2021-27072 CVE-2021-27095 CVE-2021-28310 CVE-2021-28315 CVE-2021-28445 CVE-2021-28460 CVE-2021-28480 CVE-2021-28481 CVE-2021-28482 CVE-2021-28483
Related: Microsoft Patch Tuesday, April 2021 Edition Cyber Risks ·
Threat Source Newsletter (April 15, 2021) Cyber Risks ·
CVE-2021-28310: Microsoft Win32k Privilege Escalation Vulnerability Known Exploited Vulnerabilities · Nov 03, 2021